This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft File: TzvVbotU5tonu-ZiLaxny_Aqgeo.mft (raw, json) Hash identifier: cI6cBTBczj5f/P4kbzfxtqiDuRLPpPd4IT6WntzMF78= Subject key identifier: CC:90:65:FF:11:D8:BE:6B:A4:95:16:DF:8F:BF:63:02:B0:76:79:51 Authority key identifier: 4F:3B:D5:6E:8B:54:E6:DA:27:BB:E6:62:2D:AC:67:CB:F0:2A:81:EA Certificate issuer: /CN=4f3bd56e8b54e6da27bbe6622dac67cbf02a81ea Certificate serial: 019B6FC6E3F1BCF63BAAA79498C05CB2A280 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft Manifest number: 17A4 Signing time: Tue 30 Dec 2025 15:01:03 +0000 Manifest this update: Tue 30 Dec 2025 15:01:03 +0000 Manifest next update: Wed 31 Dec 2025 15:01:03 +0000 Files and hashes: 1: 6aBtyL1HCBLQz8Fcxx2-wbI-JSY.roa (hash: s+Yjky9WV0WGtiJ2UXV97kZc6gRv1napm2o37+mL6NI=) 2: R0B0S-Vvq6PSGq8IAqKsdnjdNUo.roa (hash: jZBNXVMhAxnq4wWzeXUVcxAP1mha5zeShrdHGeYvBL4=) 3: TzvVbotU5tonu-ZiLaxny_Aqgeo.crl (hash: WzpDxd1wItgOxMjaQKxViQKVQsMO+Z2Big7DMHSt9kY=) 4: snxuxsWrIVBOH4PJX-798Ws3-_I.roa (hash: eUyKfNa1R42Kf80mOcHHq43jou6WV27ocUUMJBjr/10=) 5: wnKhG27ddvv9DbopEcZ0e8BfSyE.roa (hash: 5bhpzUqfkiYr3WyfWoYZHsfUt3MVDy9FbR7pi02+AvQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6f:c6:e3:f1:bc:f6:3b:aa:a7:94:98:c0:5c:b2:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f3bd56e8b54e6da27bbe6622dac67cbf02a81ea Validity Not Before: Dec 30 15:01:03 2025 GMT Not After : Dec 31 15:01:03 2025 GMT Subject: CN=cc9065ff11d8be6ba49516df8fbf6302b0767951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ee:12:bd:8c:15:13:20:1b:6b:0a:d9:81:ad: 53:4e:ea:3d:00:8d:54:c3:02:41:77:72:26:c7:74: 7d:d8:5e:42:44:ec:7e:e0:77:b6:e3:17:2e:77:47: 7a:be:9a:4f:64:9a:5d:4b:36:8a:65:64:6c:5d:b0: e9:ce:49:50:9f:34:ee:25:e1:5f:e9:08:10:7d:0b: 64:51:80:36:b3:f5:c8:3d:d4:7f:ec:b5:9b:54:2e: 35:2f:d5:c6:a4:08:23:de:d9:1b:d5:cc:9e:75:81: 3d:5d:ed:22:96:00:1d:ee:d1:c3:95:17:82:7e:e1: 56:a1:02:53:e1:b1:39:04:05:31:fd:a5:9d:58:8a: f2:06:53:fd:f8:5f:8a:19:81:a4:4c:ae:b1:ce:c0: e4:3c:47:30:d9:23:f0:05:df:8d:a6:ef:bb:01:b5: f2:41:a7:1f:12:8c:fd:66:03:b5:e7:60:be:59:8d: a8:01:a3:87:73:b8:24:ec:2d:d4:cd:e6:53:6a:eb: 76:9d:e0:56:45:11:4e:26:bf:33:7a:a3:d4:54:ea: 0e:86:e2:34:e0:a0:c8:2f:1c:01:47:96:67:17:8f: 32:6f:ed:94:fe:83:ae:2c:01:e2:94:c5:fe:e2:5a: 5b:e1:69:59:62:a4:55:ca:c4:f3:91:12:d9:d9:8a: bb:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:90:65:FF:11:D8:BE:6B:A4:95:16:DF:8F:BF:63:02:B0:76:79:51 X509v3 Authority Key Identifier: keyid:4F:3B:D5:6E:8B:54:E6:DA:27:BB:E6:62:2D:AC:67:CB:F0:2A:81:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:1c:41:85:f5:2f:62:5f:11:07:4f:6f:0f:0c:df:40:79:6f: 2b:77:88:06:1d:df:68:ff:1b:ad:11:db:ea:fb:91:46:23:54: 5f:12:47:10:e4:dc:e6:15:16:b7:b4:c2:24:eb:c3:d1:8e:9a: 78:fe:99:13:be:f5:a0:94:18:4d:7a:59:de:a6:57:b4:36:01: f8:ab:e3:66:e2:05:dc:7d:07:3b:b3:8b:7e:e6:33:c8:ba:8f: c9:15:c6:e4:25:f2:7a:08:9d:82:97:0c:4a:03:85:f2:43:c0: f9:69:d6:f7:e6:9c:0d:68:7f:9f:82:32:3c:cd:d5:ac:3a:b6: 90:bc:7b:56:27:e1:43:74:1b:1d:48:3a:03:88:44:71:59:ea: dc:56:e7:eb:8a:6f:61:73:10:0a:20:ca:1e:bb:6a:b0:d2:fc: e0:d7:2d:07:1e:f2:84:c5:43:e1:ce:16:a4:03:8d:1f:81:a4: 24:01:1b:5d:eb:1a:ef:b9:70:3f:eb:47:40:78:7f:31:7e:08: ec:a9:86:14:cb:7e:f5:cb:b5:78:17:6a:a7:a0:41:69:f8:e1: 7d:3e:38:82:1f:03:e7:f5:1d:48:98:e6:cf:5a:58:83:43:71: 70:87:88:1d:ae:f8:9c:29:27:b3:1d:7b:b3:83:8e:0f:81:7b: e2:07:7f:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtvxuPxvPY7qqeUmMBcsqKAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmM2JkNTZlOGI1NGU2ZGEyN2JiZTY2MjJkYWM2N2NiZjAy YTgxZWEwHhcNMjUxMjMwMTUwMTAzWhcNMjUxMjMxMTUwMTAzWjAzMTEwLwYDVQQD EyhjYzkwNjVmZjExZDhiZTZiYTQ5NTE2ZGY4ZmJmNjMwMmIwNzY3OTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1e4SvYwVEyAbawrZga1TTuo9AI1U wwJBd3Imx3R92F5CROx+4He24xcud0d6vppPZJpdSzaKZWRsXbDpzklQnzTuJeFf 6QgQfQtkUYA2s/XIPdR/7LWbVC41L9XGpAgj3tkb1cyedYE9Xe0ilgAd7tHDlReC fuFWoQJT4bE5BAUx/aWdWIryBlP9+F+KGYGkTK6xzsDkPEcw2SPwBd+Npu+7AbXy QacfEoz9ZgO152C+WY2oAaOHc7gk7C3UzeZTaut2neBWRRFOJr8zeqPUVOoOhuI0 4KDILxwBR5ZnF48yb+2U/oOuLAHilMX+4lpb4WlZYqRVysTzkRLZ2Yq7EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMyQZf8R2L5rpJUW34+/YwKwdnlRMB8GA1UdIwQY MBaAFE871W6LVObaJ7vmYi2sZ8vwKoHqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHp2VmJvdFU1dG9udS1aaUxheG55X0FxZ2VvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS82ZmUxNDktOGE3Mi00N2ZkLTg3MzUt N2RjNWJkZGY5MWI1LzEvVHp2VmJvdFU1dG9udS1aaUxheG55X0FxZ2VvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS82ZmUxNDktOGE3Mi00N2ZkLTg3MzUtN2RjNWJkZGY5MWI1 LzEvVHp2VmJvdFU1dG9udS1aaUxheG55X0FxZ2VvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADBxBhfUv Yl8RB09vDwzfQHlvK3eIBh3faP8brRHb6vuRRiNUXxJHEOTc5hUWt7TCJOvD0Y6a eP6ZE771oJQYTXpZ3qZXtDYB+KvjZuIF3H0HO7OLfuYzyLqPyRXG5CXyegidgpcM SgOF8kPA+WnW9+acDWh/n4IyPM3VrDq2kLx7VifhQ3QbHUg6A4hEcVnq3Fbn64pv YXMQCiDKHrtqsNL84NctBx7yhMVD4c4WpAONH4GkJAEbXesa77lwP+tHQHh/MX4I 7KmGFMt+9cu1eBdqp6BBafjhfT44gh8D5/UdSJjmz1pYg0NxcIeIHa74nCknsx17 s4OOD4F74gd/qg== -----END CERTIFICATE-----Generated at Wed Dec 31 00:03:36 2025 by rpki-client